
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
File: GVc7IITN9G7hzNKC36O49rfqcmw.cer (raw, json)
Hash identifier: qtZv62es3kvpBPHluIyoR5g4IE/iCGNxH4omdbgwWkU=
Subject key identifier: 19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B63349DDB1D57A565D990567ABA73A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205786
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:33:49:dd:b1:d5:7a:56:5d:99:05:67:ab:a7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:86:88:e4:1b:12:06:a7:9e:9f:00:ca:9a:
0a:8e:5d:f4:32:75:9f:ed:a0:80:c0:a7:1d:3c:7d:
be:be:2c:a3:2f:9a:d3:22:1c:ba:64:a4:fa:ae:18:
54:e9:83:5a:4a:06:35:84:52:ad:ed:ad:17:1a:b4:
e7:cb:6c:9a:07:4e:37:db:75:65:57:e0:a1:89:15:
c6:89:44:af:b1:2d:b2:b1:31:57:1d:c6:84:cc:2f:
4d:0e:89:3c:34:02:de:9d:a6:df:c7:77:65:2f:06:
41:58:38:4d:b9:a4:1c:6e:72:13:dd:a6:29:3d:a0:
9a:7f:72:4e:d8:5c:f8:9a:5e:fc:1e:93:6d:3b:43:
1a:c1:ea:07:41:1a:8c:64:c7:8a:fa:e3:86:1e:bf:
8a:b2:0f:3f:92:30:b7:b3:33:47:67:3e:21:d4:1c:
6d:c8:ea:35:97:28:a6:dd:6a:ca:9f:bf:51:d3:b6:
6e:24:04:f3:bf:fc:ca:17:4f:a9:46:90:4d:5e:14:
17:6e:bf:b9:67:39:22:a8:3f:bc:38:3c:ac:b6:08:
cb:b5:08:8a:53:0b:f3:ec:77:7e:31:cd:66:e7:2f:
dd:53:39:5a:1a:ac:2b:6b:ec:59:5a:a3:5e:39:06:
2c:19:83:2e:00:93:72:7f:4c:58:f7:a8:1c:bb:cb:
3a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205786
Signature Algorithm: sha256WithRSAEncryption
98:ef:55:85:3c:00:22:a4:b7:dc:34:5a:1d:7f:85:bd:7d:2f:
31:14:55:4d:5b:ab:bc:89:79:45:c8:96:86:45:60:b0:f5:a4:
04:aa:81:86:58:3d:7d:af:e1:d0:83:dd:7f:b2:7f:84:07:ef:
3c:72:23:ba:71:ed:79:95:40:40:75:f9:e9:14:40:c6:84:86:
6a:ac:67:c0:5a:9f:b0:81:b4:5b:18:27:41:2e:9a:3b:66:aa:
64:64:54:d9:95:84:22:73:26:27:3b:a6:17:68:3e:64:f3:d6:
1e:40:70:bf:5c:c7:27:d1:cf:a9:01:d5:ac:e0:a2:db:60:d3:
37:85:ad:5d:79:11:1c:a9:81:9b:45:01:bc:d3:a2:19:00:bf:
7a:aa:13:c9:39:89:87:98:7a:cd:df:9c:55:0e:8e:ab:43:ad:
97:e1:3a:69:ae:97:a2:b3:ce:9d:20:a8:8f:74:1d:36:07:61:
5c:b6:06:11:b7:46:23:8d:1b:ba:70:a3:4f:2c:62:19:2d:86:
c2:02:1b:3f:e2:96:4a:c8:27:25:80:de:bf:a1:be:8a:b4:dd:
53:27:98:53:b1:a6:05:6f:85:16:07:89:f5:1d:29:ef:95:49:
6d:b7:97:42:10:0d:71:db:b3:98:ab:37:df:af:0c:f3:ee:a7:
fa:14:a8:38
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQntjNJ3bHVelZdmQVnq6c6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU1MDM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTU3M2IyMDg0Y2RmNDZlZTFjY2QyODJkZmEzYjhmNmI3ZWE3MjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGeGiOQbEgannp8AypoKjl30MnWf
7aCAwKcdPH2+viyjL5rTIhy6ZKT6rhhU6YNaSgY1hFKt7a0XGrTny2yaB04323Vl
V+ChiRXGiUSvsS2ysTFXHcaEzC9NDok8NALenabfx3dlLwZBWDhNuaQcbnIT3aYp
PaCaf3JO2Fz4ml78HpNtO0MaweoHQRqMZMeK+uOGHr+Ksg8/kjC3szNHZz4h1Bxt
yOo1lyim3WrKn79R07ZuJATzv/zKF0+pRpBNXhQXbr+5ZzkiqD+8ODystgjLtQiK
Uwvz7Hd+Mc1m5y/dUzlaGqwra+xZWqNeOQYsGYMuAJNyf0xY96gcu8s61wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFBlXOyCEzfRu4czSgt+juPa36nJsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzhiODU0
Mi0xY2ExLTRmOGQtOGVlNy1lNWQwZTE4MGQ4ZTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvOGI4NTQy
LTFjYTEtNGY4ZC04ZWU3LWU1ZDBlMTgwZDhlOC8xL0dWYzdJSVROOUc3aHpOS0Mz
Nk80OXJmcWNtdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMj2jANBgkqhkiG9w0BAQsFAAOCAQEAmO9VhTwAIqS3
3DRaHX+FvX0vMRRVTVurvIl5RciWhkVgsPWkBKqBhlg9fa/h0IPdf7J/hAfvPHIj
unHteZVAQHX56RRAxoSGaqxnwFqfsIG0WxgnQS6aO2aqZGRU2ZWEInMmJzumF2g+
ZPPWHkBwv1zHJ9HPqQHVrOCi22DTN4WtXXkRHKmBm0UBvNOiGQC/eqoTyTmJh5h6
zd+cVQ6Oq0Otl+E6aa6XorPOnSCoj3QdNgdhXLYGEbdGI40bunCjTyxiGS2GwgIb
P+KWSsgnJYDev6G+irTdUyeYU7GmBW+FFgeJ9R0p75VJbbeXQhANcduzmKs3368M
8+6n+hSoOA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:18:23 2025 by rpki-client